CVE-2025-28033

CVSS 3.1 Score 7.3 of 10 (high)

Details

Published Apr 22, 2025

Updated: Apr 29, 2025

CWE ID 121

Summary

CVE-2025-28033 is a pre-authentication buffer overflow vulnerability affecting several TOTOLINK routers, including the A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129. The vulnerability is located in the setNoticeCfg function and can be exploited through the IpTo parameter. Successful exploitation could lead to arbitrary code execution and potential unauthorized access or data theft. Users are advised to update their routers to the latest available firmware to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Vendors

TOTOLINK

Advisories, Assessments, and Mitigations

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Predator Still Active, with New Client and Corporate Links Identified

Russia-Aligned TAG-110 Targets Tajikistan with Macro-Enabled Word Documents

Measuring the US-China AI Gap

Know What Matters

For Customers

For Partners